Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d685b144-01da-4b41-857c-d596807b04bd.roa
File:                     d685b144-01da-4b41-857c-d596807b04bd.roa (raw, json)
Hash identifier:          zLRshl9wnkqLM/o1LeUi2I+XCnZYZxWF2W8vmrGkIrE=
Subject key identifier:   AE:5B:82:C3:A7:F9:BE:D9:B0:1C:C1:1F:9F:60:D4:52:25:D8:C7:9B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       15E8D5B1240207236CD5B16012F8436724EAA8E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d685b144-01da-4b41-857c-d596807b04bd.roa
Signing time:             Wed 22 Oct 2025 00:31:49 +0000
ROA not before:           Wed 22 Oct 2025 00:31:49 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f68:4080::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e8:d5:b1:24:02:07:23:6c:d5:b1:60:12:f8:43:67:24:ea:a8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:31:49 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=fdb2e570141d97ccb49c95377d4c5458f6b0ec276514f5276e5018a7326c88e0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:15:50:ac:a2:f9:3f:cf:f2:0f:59:42:69:
                    60:2f:5f:96:31:6c:27:7a:3b:99:65:0e:83:1b:09:
                    2f:f8:fc:73:dd:89:b0:59:37:85:46:b7:8e:89:11:
                    f2:e4:55:a6:89:5f:f3:9b:a0:d3:b1:56:b6:d9:85:
                    e0:4e:5c:ac:69:9f:6b:6d:7a:cc:98:50:de:21:ca:
                    93:6f:dc:75:c9:77:75:62:40:c8:0c:cb:6c:55:39:
                    f7:c7:f0:1f:34:7b:1c:f3:e4:e5:b4:07:27:67:ee:
                    32:77:29:d6:55:5d:66:4b:09:6a:5a:27:d1:63:5e:
                    45:70:91:f7:32:80:9c:0f:ec:34:0f:38:a1:0d:79:
                    9e:82:ac:ae:96:df:8f:06:4d:48:c5:ba:48:e9:cd:
                    a8:e2:1f:3c:dd:df:76:6e:b6:a0:90:e7:ca:89:db:
                    4d:69:c0:f4:cb:23:47:dc:5e:8a:ff:dd:2a:37:78:
                    f8:75:fc:79:fc:63:1b:63:c2:2e:9e:38:bf:6b:0e:
                    76:cf:c4:f2:e2:f4:84:f8:aa:37:a7:af:ad:57:2e:
                    f7:f2:f6:8b:9f:60:21:7e:c4:1a:86:1f:5e:88:e8:
                    44:f3:a5:c0:eb:b3:e9:a9:eb:81:4e:6f:96:1c:d6:
                    a8:f5:64:7f:38:24:39:f6:f2:4c:6c:a0:45:bb:a2:
                    39:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5B:82:C3:A7:F9:BE:D9:B0:1C:C1:1F:9F:60:D4:52:25:D8:C7:9B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d685b144-01da-4b41-857c-d596807b04bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f68:4080::/46

    Signature Algorithm: sha256WithRSAEncryption
         7f:71:08:03:16:f9:db:76:cc:04:39:b7:d5:52:8a:c6:54:8c:
         da:31:a4:29:5f:83:89:e2:bd:68:4c:17:f5:4d:f1:04:99:c3:
         73:49:c3:ee:51:9a:db:6d:e7:1f:cc:ea:6e:4e:8b:4d:07:05:
         d6:00:8f:b2:54:05:0c:f4:2c:33:85:82:f1:52:95:6e:9a:44:
         3c:72:dc:b3:09:c9:cb:50:8b:87:1e:77:f2:d8:00:d1:59:b2:
         65:b4:3b:a6:59:15:38:80:76:33:44:0d:c0:e6:e0:89:af:25:
         a5:12:57:cc:49:66:0b:90:8a:63:5e:ef:60:9d:78:d6:e7:fc:
         d0:0e:5e:18:c5:d8:35:4d:72:4a:50:3b:48:39:79:e3:2d:d1:
         8b:0e:70:2f:79:2e:dd:0b:09:fa:3b:89:61:56:0b:e3:3f:57:
         2b:bb:7c:fd:6b:d9:8f:2d:34:b7:68:9e:a7:0e:d5:56:43:81:
         39:80:8c:3e:ed:26:61:23:7d:40:94:d6:8b:bb:f2:82:f7:2e:
         a0:e8:c2:a9:7d:b9:13:ff:9c:83:75:0c:ad:03:9c:b4:29:21:
         de:4a:6d:95:31:fa:fc:6e:b7:72:68:63:a6:01:fa:19:f7:dc:
         6d:e6:79:0e:ca:4e:be:11:ce:fa:ee:8b:00:df:5b:06:3e:8d:
         c1:1d:74:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----